Security in Database Systems

Posted: December 30th, 2008 | Author: admin | Filed under: Identity Theft | Tags: , , |

Database security is the system or the process which helps in saving the data base from external as well as internal theft. The database is the most important collection for any company. You should really understand that what can be done if some malicious hacker gets access to the database of any company. It could really be devastating. The question arises that how can we protect our database.

Generally the database is protected with the help of firewalls and the routers. However many other checks are also implemented? Another security parameter which is really very important is the other network security parameters like intrusion detection security parameters.

You must know that now database security has become more critical and this has happened because the networks are now made more open. Database provides many layer and types of information security. They are as follows:

  1. Access controls.
  2. Auditing.
  3. Authentication.
  4. Encryption.
  5. Integrity controls.

You must really keep all these things in mind. I would like to discuss them one by one.

1. Access controls
This is done by restricting the accessing power to the database only for limited personalities. Only those will be allowed to access the databases that are well recognized. The system will not allow any new identity to scrap through the database. You can do this only if you have the permission. Hence in one way we are trying to access the database but our accessing power is being checked. That is why we call it access control. You will talk about SQL server or you will talk about the Oracle, you will definitely get a way to implement the access control.

2. Auditing
Auditing is also very common as far as database security is concerned. You will definitely have to review the user again and again. This is what auditing is all about. I will give you one example. Suppose you are building software related to managing the database. Suppose you allow someone to access your database. You will definitely have sub databases as well. Would not you like to add some more checks? You will surely like to do so and hence indirectly you are doing auditing.

3. Authentication
I will give you an example to explain the authentication. Suppose you want to purchase some goods from a mall. You want to use your credit card for this. What will happen when you give your credit card for payment? You must know that your identity will be authenticated and then only the bank will allow your transaction to take place. This is authentication which deals with verifying the identity.

There are many other terms as well which you will find very important. One of them is encryption. I must say that you will really find encryption to be most important as far as present situation is concerned.



Leave a Reply